Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/qUn5FWBAKb68AE3q1y0RvAcV37s.mft
File: qUn5FWBAKb68AE3q1y0RvAcV37s.mft (raw, json)
Hash identifier: aAiyQm+d5HpMEZGrh2LYmPDJLUatlG89aa4Wl0BlAz4=
Subject key identifier: 86:AB:90:19:2E:47:05:30:AC:46:9A:40:E0:52:0C:FB:3A:5D:28:72
Authority key identifier: A9:49:F9:15:60:40:29:BE:BC:00:4D:EA:D7:2D:11:BC:07:15:DF:BB
Certificate issuer: /CN=a949f915604029bebc004dead72d11bc0715dfbb
Certificate serial: 01A0CA46AF27AEF14E18A36A6AA3B382E11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUn5FWBAKb68AE3q1y0RvAcV37s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/qUn5FWBAKb68AE3q1y0RvAcV37s.mft
Manifest number: 5E
Signing time: Tue 22 Sep 2026 18:00:25 +0000
Manifest this update: Tue 22 Sep 2026 18:00:25 +0000
Manifest next update: Wed 23 Sep 2026 18:00:25 +0000
Files and hashes: 1: qUn5FWBAKb68AE3q1y0RvAcV37s.crl (hash: K+Xjl+XUGqXTTwSNH3FJBeCJHEryT66wlem+5/AG4mE=)
2: uHI7c1lxQG_MT9KOHTDNSrPpJX8.roa (hash: R1Pw1llMZGhkTopwsbaboewxn+ec/eSdwTYfu1/Mfvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/qUn5FWBAKb68AE3q1y0RvAcV37s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/qUn5FWBAKb68AE3q1y0RvAcV37s.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUn5FWBAKb68AE3q1y0RvAcV37s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:af:27:ae:f1:4e:18:a3:6a:6a:a3:b3:82:e1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a949f915604029bebc004dead72d11bc0715dfbb
Validity
Not Before: Sep 22 18:00:25 2026 GMT
Not After : Sep 23 18:00:25 2026 GMT
Subject: CN=86ab90192e470530ac469a40e0520cfb3a5d2872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:3e:96:38:b4:3f:d9:3c:15:e2:c9:88:87:
72:e0:db:47:f9:8c:4a:d8:8e:f2:a2:96:89:48:95:
c9:e3:7e:5e:bb:40:ca:64:15:9b:20:f5:7c:f2:bd:
2b:57:b6:62:36:60:78:48:10:82:f0:e4:66:b0:c0:
7c:be:df:0a:12:d9:88:c6:d5:cd:03:ef:20:67:5f:
c7:0c:72:f6:4b:47:15:0c:3c:50:96:59:71:1f:6c:
1a:9e:88:e6:08:ce:5f:28:f5:86:8e:a9:0c:79:39:
63:0d:dc:25:2d:12:12:e2:07:d9:38:6c:f6:05:fc:
28:92:9d:0a:46:ca:8f:24:fc:10:c0:e9:74:6b:96:
d8:fa:79:d9:ba:15:a9:4d:44:9a:11:59:ef:6f:2a:
86:8d:ee:42:ec:47:12:97:b3:36:1d:0e:02:a6:1b:
06:b2:31:43:7e:52:d8:ad:7b:49:57:b6:ab:11:e4:
e9:d7:6d:6a:b7:61:7e:e3:fc:27:aa:81:87:13:fd:
be:51:ea:0e:d0:d8:5b:d6:25:ad:c1:83:d4:f6:37:
bb:c7:1d:22:ac:2b:9b:75:4b:40:22:10:51:18:f1:
9a:50:c7:43:a4:af:e1:07:bf:70:b8:43:2a:87:b5:
1f:7b:bf:1d:7e:a3:95:98:87:ac:d3:fe:8b:8b:65:
0f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AB:90:19:2E:47:05:30:AC:46:9A:40:E0:52:0C:FB:3A:5D:28:72
X509v3 Authority Key Identifier:
keyid:A9:49:F9:15:60:40:29:BE:BC:00:4D:EA:D7:2D:11:BC:07:15:DF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUn5FWBAKb68AE3q1y0RvAcV37s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/qUn5FWBAKb68AE3q1y0RvAcV37s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/98f299-79f3-44c9-be47-3ca0a3fbdd70/1/qUn5FWBAKb68AE3q1y0RvAcV37s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:c4:93:3e:1f:22:34:99:8d:44:9a:d0:25:55:6e:fb:51:e4:
a1:da:71:d2:56:27:b3:9e:9c:90:95:21:6d:66:ed:64:6a:33:
81:f9:95:33:29:d3:17:96:00:69:42:4d:30:99:39:4c:60:70:
33:df:24:b1:5a:45:9f:d9:dc:b6:84:49:a0:8c:87:4f:cf:f6:
48:51:d9:9e:23:58:6b:3f:99:6d:12:8b:f2:06:97:e0:ee:62:
d7:3c:fd:45:e6:c6:08:4c:39:9a:4c:5d:79:bd:16:69:94:a6:
a3:fa:8c:15:4f:7d:9c:7e:b2:49:e9:7d:ba:7a:98:ba:06:73:
09:9d:b4:31:6d:85:ce:8f:15:ee:18:56:04:4d:ec:81:6e:02:
6c:48:8b:7c:19:3f:4c:97:cc:d6:1b:5d:69:ee:9f:13:e5:63:
1b:a5:d7:1f:42:62:9c:a2:0a:68:c3:b3:d5:35:84:20:4b:e0:
8d:a5:c8:7d:08:b1:cb:1c:0d:fb:b8:5b:80:c9:a9:c7:df:00:
6e:19:1b:c5:d4:95:f5:56:78:a4:bb:59:ba:87:f5:34:a3:5b:
66:f9:9b:1d:a7:5e:aa:31:2e:e7:c4:22:f1:ca:43:52:53:73:
d1:68:fa:0b:5d:20:3c:6f:ee:28:82:fe:7b:68:82:88:f4:b5:
37:d0:ce:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:10:54 2026 by rpki-client